High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-30	CVE-2022-33085	Unspecified vulnerability in Ecisp Espcms-P8 ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_public\espcms_templates\ESPCMS_Templates. network low complexity ecisp	7.2
2021-08-24	CVE-2020-18913	SQL Injection vulnerability in Ecisp Espcms-P8 EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. network low complexity ecisp CWE-89	7.5